Denial of Service Vulnerability in Apache Qpid Broker-J
CVE-2026-92560

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Qpid Broker-j
Vendor
CVE Published:
25 September 2026

What is CVE-2026-92560?

A vulnerability in Apache Qpid Broker-J allows a pre-authentication attacker to exploit type size and count handling, potentially resulting in excessive resource allocation. This may lead to a denial of service, rendering the affected system unavailable. Users are advised to upgrade to version 10.1.1 or later to address this issue effectively.

Affected Version(s)

Apache Qpid Broker-J 0 <= 10.1.0

References

https://lists.apache.org/thread/dcsjw242n1bxdog29hwlg43r5...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

n0mi1k
.